{"id":91547,"date":"2023-05-16T21:34:04","date_gmt":"2023-05-16T21:34:04","guid":{"rendered":"https:\/\/www.techrepublic.com\/?p=4093199"},"modified":"2023-05-16T21:34:04","modified_gmt":"2023-05-16T21:34:04","slug":"sticking-to-traditional-security-playbook-is-mistake-for-cloud-security-palo-alto-networks-svp","status":"publish","type":"post","link":"https:\/\/cloudnewshub.com\/?p=91547","title":{"rendered":"Sticking to traditional security playbook is mistake for cloud security: Palo Alto Networks SVP"},"content":{"rendered":"
\"A
Image: Rafael Henrique\/Adobe Stock<\/figcaption><\/figure>\n

Worldwide spending on public cloud services is set to grow<\/a> 20.7% to total $591.8 billion in 2023, according to Gartner, and threat actors are getting better at exploiting unpatched vulnerabilities.<\/p>\n

Recent research<\/a> by Palo Alto Networks\u2019 Unit 42 found that more than 60% of organizations take over four days to resolve security issues, over 63% of codebases in production have unpatched vulnerabilities, and threat actors exploit a misconfiguration or vulnerability within hours.<\/p>\n

The company\u2019s Prisma Cloud is a top security player in spotting vulnerabilities in cloud-native application development and deployment. TechRepublic spoke with Ankur Shah, SVP and general manager of Prisma Cloud, about what cloud security means and how IT pros and decision makers should think beyond the traditional cybersecurity playbook when it comes to cloud security.<\/p>\n

TechRepublic:<\/strong> How has hybrid work and migration to cloud business informed what Palo Alto\u2019s Prisma does?<\/p>\n

Ankur Shah:<\/strong> Before the cloud, security was like a house with one front door, a camera and a security guard: one level of security and you\u2019re good to go. Now security is very dynamic. Every house looks and feels different. There are windows and doors and you don\u2019t always know which are open, and the crown jewels are inside. So there\u2019s a lot of \u201clift and shift\u201d [the process of migrating applications and systems to the cloud] with customers rewriting applications \u2014 building \u201chouses\u201d in cloud infrastructure, and the security person at IT does not have as much control over how these houses get built.<\/p>\n

TechRepublic:<\/strong> Developers do, nowadays.<\/p>\n

Ankur Shah:<\/strong> \u2026 Because every company is becoming a digital company. If I\u2019m Home Depot, I am a technology company that happens to be in home hardware; if I\u2019m Pfizer, I\u2019m a technology company that happens to be doing pharmaceuticals: today people are using AWS or another cloud service provider and developing their own software. So, yes, developers can have outsized influence because they have to build fast. Today there are over 33 million developers and fewer than three million security people who actually know the cloud. I don\u2019t have data for this one, but I would guess that there are probably fewer than 20,000 people in the world who really understand cloud and security.<\/p>\n

TechRepublic:<\/strong> But isn\u2019t cloud security pretty much what most security is about now?<\/p>\n